PHP Code Security 3-Ajax and Logical Payment Problem ("Zero Purchase")
3. AJAX Authentication and Related Logical Payments
1.AJAX Authentication
Ajax definition: AJAX is not a specification of JavaScript, it's just an abbreviation for the brother's "invention": Asynchronous JavaScript and XML, meaning to execute asynchronous network requests using JavaScript.
Asynchronous: refers to sending multiple d ...
Posted by deezin on Tue, 01 Feb 2022 07:37:56 +0100
2021-06-05 - Analysis of CSRF and XSS
Analysis of CSRF and XSS
preface
Bloggers recently had an interview and encountered a question: * * What are the principles of CSRF and XSS? How to prevent CSRF and XSS** Because the blogger didn't understand this part deeply enough, the answer in the interview was not comprehensive enough. Today, let's discuss the mystery behind CSRF and X ...
Posted by dazz_club on Sun, 30 Jan 2022 05:22:08 +0100
thinkphp5.1. session sharing solution for multi domain jump problem
Catalogue of series articles
Recently, I encountered the problem of jumping from multiple domain names to session s. Here is a Demo to record my ideas
Preparation conditions
1. Framework thinkphp5 one 2. apache server 3.MySQL database
I Problem description
Suppose I have two sites with different domain names, a.com and b.com, ...
Posted by Zooter on Sun, 30 Jan 2022 04:52:15 +0100
Install Let's Encrypt certificate through Certbot to realize free HTTPS access of the whole site
reference
Install Let's Encrypt certificate through Certbot to realize HTTPS access of the whole station
College army - upgrade blog application from HTTP protocol to HTTPS for free
certbot official website address
Open the home page and select your own system version first (the web server I use here is nginx and the system is centos7) Tran ...
Posted by knowNothing on Sat, 29 Jan 2022 19:52:49 +0100
[with source code] hard core | take you to develop a remote video monitoring project
Remote video surveillance
The Internet of things has been unknowingly integrated into our life and brought convenience to us. For example, smart door locks, ETC electronic automatic charging system, ETC. at first, it felt very novel, and now it is used to it.
It can even be said that the Internet of things is the inevitable trend of Internet ...
Posted by tensitY on Sat, 29 Jan 2022 01:32:49 +0100
[SUCTF 2019]EasyWeb --- no parameter RCE
SUCTF 2019]EasyWeb
Test site:
No alphanumeric shellUse htaccess upload fileBypass open_basedir Source code audit
<?php
function get_the_flag(){
// web admin will remove your upload file every 20 min!!!!
$userdir = "upload/tmp_".md5($_SERVER['REMOTE_ADDR']); //Naming format (upload/tmp_md5(ip))
if(!file_exists($userdir)){ ...
Posted by chintupintu03 on Sat, 29 Jan 2022 01:15:05 +0100
PHP interactive MySQL realizes login and registration function
catalogue
1, Basic knowledge
Establish and close the connection with MySQL server
1) Connect to the specified mysql server
2) Prompt in case of connection error
3) Set default character encoding
4) Select a specific database: mysqli_select_db ( $link , string $dbname);
5) Close the connection with mysql server
2, Realize login registr ...
Posted by midgar777 on Fri, 28 Jan 2022 19:58:28 +0100
Using Lambda expression to realize super sorting function
In the process of system development, sorting data is a very common scenario. Generally speaking, we can adopt two ways:With the help of the sorting function of the storage system (supported by SQL, NoSQL and NewSQL), the query result is the ordered resultThe query results are unordered data and sorted in memory.Today I want to talk about the s ...
Posted by phast1 on Fri, 28 Jan 2022 13:03:59 +0100
HTML+PHP+Mysql login registration page
1, PHP development landing page
1. Database construction
First create a test database login table in mysql database:
Set the following fields:
id: it is unique, type int, and select the primary key.
uesrname: user name, type varchar, length 30.
Password: password, type varchar, length 30.
Add a user name and password for testing
A d ...
Posted by Alka-Seltzer on Fri, 28 Jan 2022 11:39:31 +0100
Generate Excel spreadsheet from the server (Node.js+SpreadJS)
Node.js is a JavaScript running environment based on Chrome V8 engine, which is usually used to create web applications. It can handle multiple connections simultaneously and is not thread dependent like most other models.
For Web developers, the scenario of obtaining data from a database or Web server and then outputting it to an Excel file f ...
Posted by shadow1200 on Wed, 26 Jan 2022 14:24:17 +0100